Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
File: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (raw, json)
Hash identifier: +Y06m50DqnsIuPY/QFBKqn6J5W10xn1bnfWoJv3tUPE=
Subject key identifier: 78:D4:FD:04:C8:8D:81:C3:8C:53:DF:D5:8C:51:9D:AC:D8:95:C7:23
Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial: 35FF
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
Signing time: Thu 22 Oct 2026 01:38:00 +0000
ROA not before: Thu 22 Oct 2026 01:38:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7604
IP address blocks: 103.6.12.0/22 maxlen: 22
103.6.12.0/24 maxlen: 24
103.6.13.0/24 maxlen: 24
103.6.14.0/24 maxlen: 24
103.6.15.0/24 maxlen: 24
103.25.112.0/23 maxlen: 23
103.241.200.0/22 maxlen: 22
103.241.200.0/24 maxlen: 24
103.241.201.0/24 maxlen: 24
119.252.64.0/22 maxlen: 22
119.252.64.0/24 maxlen: 24
119.252.65.0/24 maxlen: 24
119.252.66.0/24 maxlen: 24
119.252.68.0/22 maxlen: 22
119.252.72.0/22 maxlen: 22
119.252.72.0/23 maxlen: 23
119.252.74.0/24 maxlen: 24
119.252.76.0/22 maxlen: 22
119.252.80.0/22 maxlen: 22
119.252.84.0/22 maxlen: 22
119.252.86.0/24 maxlen: 24
119.252.88.0/22 maxlen: 22
119.252.88.0/23 maxlen: 23
119.252.91.0/24 maxlen: 24
119.252.92.0/22 maxlen: 23
122.202.64.0/20 maxlen: 20
180.233.128.0/24 maxlen: 24
180.233.129.0/24 maxlen: 24
180.233.130.0/24 maxlen: 24
180.233.131.0/24 maxlen: 24
202.74.160.0/20 maxlen: 20
202.74.160.0/22 maxlen: 22
202.74.164.0/22 maxlen: 24
202.74.168.0/22 maxlen: 22
202.74.172.0/22 maxlen: 22
202.74.174.0/24 maxlen: 24
202.74.176.0/22 maxlen: 22
202.74.178.0/24 maxlen: 24
202.74.180.0/22 maxlen: 22
202.74.184.0/22 maxlen: 22
202.74.188.0/22 maxlen: 22
202.74.188.0/23 maxlen: 23
202.191.4.0/22 maxlen: 24
203.7.224.0/23 maxlen: 23
203.7.224.0/24 maxlen: 24
203.19.12.0/24 maxlen: 24
203.23.208.0/21 maxlen: 21
203.23.216.0/22 maxlen: 22
203.23.220.0/22 maxlen: 22
203.23.220.0/23 maxlen: 24
203.23.223.0/24 maxlen: 24
203.24.54.0/24 maxlen: 24
203.25.26.0/23 maxlen: 23
203.30.19.0/24 maxlen: 24
203.30.34.0/24 maxlen: 24
203.31.0.0/24 maxlen: 24
203.32.124.0/22 maxlen: 22
203.32.125.0/24 maxlen: 24
203.34.30.0/23 maxlen: 23
203.34.30.0/24 maxlen: 24
203.55.198.0/24 maxlen: 24
203.124.176.0/20 maxlen: 20
203.124.191.0/24 maxlen: 24
203.196.92.0/22 maxlen: 22
203.209.160.0/20 maxlen: 20
203.209.160.0/22 maxlen: 22
203.209.164.0/24 maxlen: 24
203.209.166.0/23 maxlen: 23
203.209.168.0/24 maxlen: 24
203.209.169.0/24 maxlen: 24
203.209.170.0/23 maxlen: 23
203.209.172.0/22 maxlen: 22
2401:400::/32 maxlen: 32
2401:401::/32 maxlen: 32
2401:402::/31 maxlen: 32
2403:3400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 14:38:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13823 (0x35ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Validity
Not Before: Oct 22 01:38:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ad968f8-f765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:8c:e5:d0:cc:f6:b9:a1:35:a7:32:f3:be:
e4:b5:f5:8b:b3:25:6c:d9:10:16:b4:29:7e:fd:0a:
ba:68:a3:69:e7:26:0f:6c:cc:d2:10:82:d2:b8:68:
80:a1:50:58:4c:64:27:3e:a1:90:2e:aa:c3:a5:44:
67:39:7c:f4:3e:ce:1a:83:d2:6b:d9:8b:d0:25:59:
fd:da:e0:87:9c:dc:67:30:21:f1:11:dc:5e:a5:8c:
cc:4b:c7:8e:4b:f2:67:d5:8c:72:6e:38:11:9a:ab:
03:e6:49:ac:b1:99:58:0a:97:6c:a7:e1:e3:ea:4e:
dc:86:38:15:70:02:f8:58:60:2f:76:bd:e5:9d:57:
c2:89:9a:2b:e8:b4:5e:a6:a8:98:9d:92:f6:4e:9f:
17:ae:20:af:de:df:9e:37:63:3f:9e:ad:bf:01:a4:
30:bd:cd:6c:51:00:e8:df:13:30:7a:6e:01:8f:a7:
37:df:40:b5:e7:50:08:7d:9b:e9:81:b5:44:08:88:
e2:bb:c8:71:f5:5c:82:a3:74:c2:bb:c5:0f:fe:d5:
4d:8d:14:5f:37:51:e7:db:f1:bb:ff:8f:c1:a1:0f:
b9:94:1d:fa:29:27:ec:99:dc:68:bc:83:41:c3:59:
70:45:87:5d:a8:93:c5:b5:ae:b6:95:3d:0d:31:04:
1e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D4:FD:04:C8:8D:81:C3:8C:53:DF:D5:8C:51:9D:AC:D8:95:C7:23
X509v3 Authority Key Identifier:
keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.12.0/22
103.25.112.0/23
103.241.200.0/22
119.252.64.0/19
122.202.64.0/20
180.233.128.0/22
202.74.160.0/19
202.191.4.0/22
203.7.224.0/23
203.19.12.0/24
203.23.208.0/20
203.24.54.0/24
203.25.26.0/23
203.30.19.0/24
203.30.34.0/24
203.31.0.0/24
203.32.124.0/22
203.34.30.0/23
203.55.198.0/24
203.124.176.0/20
203.196.92.0/22
203.209.160.0/20
IPv6:
2401:400::/30
2403:3400::/32
Signature Algorithm: sha256WithRSAEncryption
32:0f:44:1f:c1:83:bd:40:41:3a:66:c5:d9:cf:be:e7:f6:98:
2f:48:66:81:37:57:ed:b5:68:9b:55:87:a7:05:eb:ce:c1:da:
7d:24:89:b1:83:fb:7e:7f:37:cf:90:10:15:78:5b:2e:82:52:
de:ac:9c:13:31:cd:72:de:89:10:38:a4:80:af:37:07:6d:9f:
1e:70:09:ee:49:24:88:64:fd:cc:da:2b:0c:f5:49:2a:cb:b5:
93:14:c9:d0:c5:74:40:ee:80:8f:6b:c8:e7:c5:f0:37:9a:06:
12:63:27:88:ea:ef:a9:e6:64:c0:a0:a9:cd:c0:9d:7e:82:98:
b3:a0:4b:10:e5:08:7c:ee:69:ab:27:e4:16:5c:18:8a:4c:82:
6b:17:10:1e:53:73:37:5f:df:ea:3c:86:a0:1b:fc:c6:56:84:
01:85:9a:d5:3a:77:78:60:8d:a5:30:9e:0e:93:73:92:7d:4d:
97:f7:29:78:04:f2:d3:c1:38:42:29:03:ef:26:eb:f4:78:eb:
70:2f:c3:4d:a0:93:3d:48:96:73:72:d3:2b:91:38:56:c6:de:
42:a1:57:c2:c8:71:32:fe:0c:79:d0:ba:1a:72:aa:b5:e5:23:
ef:a1:29:48:2a:9a:c3:b3:20:86:54:10:81:c2:f5:f0:bc:6b:
38:71:fa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:21:28 2026 by rpki-client